Privacy Policy

This policy explains what personal data we process on slakona.com, why, how long we keep it, who receives it, and what rights you have.

1. Controller

AM Holding SIA, registration No. 40103973212, Ulmaņa parks 2, "B" ieeja, 3. stāvs, Kalniņi, Mārupe, Mārupes novads, LV-2167, Latvija.

For anything about personal data, write to info@slakona.com. No data protection officer has been appointed — this activity does not require one — so please send all requests to that address.

2. What we process

2.1. Order data

Name, email address, phone number, delivery address or chosen parcel locker, order contents and total, payment status, and correspondence about the order.

2.2. Account data

If you create an account — email address, a cryptographic derivation of your password (the password itself is not stored), saved addresses, order history and wishlist.

2.3. Newsletter

Your email address, if you have subscribed.

2.4. Concierge conversations

The messages you type into the shop's chat and your rating of the answer. Please do not enter data there that is not needed to answer your question.

2.5. Technical data

IP address, browser and device type, pages viewed. Visit statistics are produced by our own Plausible installation, which uses no cookies and builds no individual profile. Advertising uses the Meta Pixel — see the Cookie Policy.

3. Purposes and legal bases

Purpose	Legal basis
Fulfilling an order, delivery, returns and order correspondence	Performance of a contract (GDPR Art. 6(1)(b))
Accounting and tax records	Legal obligation (Art. 6(1)(c))
Running your account	Performance of a contract
Newsletters	Consent (Art. 6(1)(a))
Social media advertising and measuring its effectiveness	Consent
Improving the shop, reviewing answer quality, preventing fraud	Legitimate interests (Art. 6(1)(f))

4. Who receives the data

Data is shared only as far as the service requires:

• Stripe Payments Europe, Ltd. — payment processing. Card details are entered directly with Stripe and never reach us.
• Carriers — Omniva, DPD, Venipak, and the delivery broker Swotzy. They receive the recipient, the address or locker, and a phone number in order to deliver.
• Anthropic PBC — the shop's chat assistant runs on this provider's language model, so the question you type is sent to its servers for processing.
• Meta Platforms Ireland Ltd. — advertising pixel and advertising measurement.
• IT infrastructure providers — server and email services.
• Accounting and warehouse systems used internally by the company.

We do not sell or pass data to third parties for their own marketing. Data may be disclosed to public authorities where the law requires it.

5. Transfers outside the EU/EEA

Some of the providers above (including Anthropic and Meta) also process data in the United States. Such transfers rely on a European Commission adequacy decision or on standard contractual clauses.

6. How long we keep it

• Order and accounting records — 5 years, as required by the Latvian Accounting Law.
• Account data — for as long as the account exists. When an account is deleted we delete it too, except what must be kept for accounting.
• Newsletter address — until you unsubscribe.
• Concierge conversations — currently kept with no fixed period, so that answer quality can be reviewed. You may ask us to delete them.

7. Your rights

You have the right to:

• access your data and receive a copy;
• have inaccurate data corrected;
• have data erased where it is no longer needed;
• restrict or object to processing based on legitimate interests;
• receive your data in a portable format;
• withdraw consent at any time — this does not affect processing carried out before the withdrawal.

Send requests to info@slakona.com. We answer within one month. To avoid disclosing data to the wrong person, we may ask you to confirm your identity.

8. Complaints

If you believe your data is being handled wrongly, please write to us first. You also have the right to complain to the supervisory authority — the Data State Inspectorate of Latvia (pasts@dvi.gov.lv, www.dvi.gov.lv).

9. Changes to this policy

This policy may be updated. The current version is always on this page, with the date of the last change at the foot of it.